Virtual Machines for Aircraft Network Data Processing Systems

ABSTRACT

A method and apparatus are provided for operating a network data processing system on an aircraft. A number of operations are performed in a virtual machine on the aircraft. The virtual machine runs on a processor unit in the network data processing system on the aircraft to create a simulated computer environment. The virtual machine accesses resources of the processor unit for performing the number of operations using a host operating system on the processor unit. A current state of the aircraft is identified by the network data processing system. Running of the virtual machine is managed based on the current state of the aircraft and a policy for managing the virtual machine for different states of the aircraft.

BACKGROUND INFORMATION

1. Field

The present disclosure relates generally to aircraft and, in particular,to aircraft network data processing systems and software aircraft partson aircraft. Still more particularly, the present disclosure relates toa method and apparatus for loading and operating a virtual machine on anaircraft network data processing system on an aircraft and forperforming operations by a virtual machine on an aircraft or othervehicles.

2. Background

Modern aircraft are extremely complex. For example, an aircraft may havemany types of electronic systems on-board. These systems are often inthe form of line-replaceable units (LRUs). A line-replaceable unit is anitem that can be removed and replaced from an aircraft. Aline-replaceable unit is designed to be easily replaceable. Aline-replaceable unit may be replaced when the aircraft is in flight orwhile the aircraft is on the ground. Line-replaceable units aretypically packaged in a box and may be sealed.

A line-replaceable unit may take on various forms. A line-replaceableunit on an aircraft may be, for example, without limitation, a flightmanagement system, an autopilot, an in-flight entertainment system, acommunications system, a navigation system, a flight controller, aflight recorder, a collision avoidance system, a system to supportmaintenance functions, and a system to support crew processes. Thevarious line-replaceable units on an aircraft may be parts of anaircraft network data processing system.

Line-replaceable units may use software or programming to provide thelogic or control for various operations and functions. Typically, allsoftware on an aircraft is treated as a separate part or is combinedwith a hardware part and is unchangeable without changing the hardwarepart number. Aircraft software that is treated as an aircraft part maybe referred to as a loadable software aircraft part or a softwareaircraft part. Software aircraft parts are parts of an aircraft'sconfiguration.

Aircraft operators are entities that operate aircraft. Aircraftoperators also may be responsible for the maintenance and repair ofaircraft. Examples of aircraft operators include airlines and militaryunits. When an aircraft operator receives an aircraft, software aircraftparts may be already installed in the line-replaceable units on theaircraft.

An aircraft operator may also receive copies of these loaded softwareaircraft parts in case the parts need to be reinstalled or reloaded intothe line-replaceable units on the aircraft. Reloading of softwareaircraft parts may be required, for example, if a line-replaceable unitin which the software is used is replaced or repaired. Further, theaircraft operator also may receive updates to the software aircraftparts from time to time. These updates may include additional featuresnot present in the currently-installed software aircraft parts and maybe considered upgrades to one or more line-replaceable units. Specifiedprocedures may be followed during loading of a software aircraft part onan aircraft so that the current configuration of the aircraft, includingall of the software aircraft parts loaded on the aircraft, is known.

In some cases, operations performed using some software aircraft partsmay need to be isolated from operations performed using other softwareaircraft parts. In other cases, it may be desirable to controloperations performed using some software aircraft parts based on acurrent state of the aircraft. Current systems and methods for providingsuch isolation and for controlling operations in an aircraft networkdata processing system rely extensively on computer hardware. Thesecurrent systems and methods may be less effective and efficient thandesired. In particular, more hardware on an aircraft means more weight.More weight on an aircraft increases fuel consumption and, therefore,reduces the aircraft operating efficiency and increases aircraftoperating costs.

Accordingly, it would be advantageous to have a method and apparatusthat takes into account one or more of the issues discussed above, aswell as possibly other issues.

SUMMARY

An advantageous embodiment of the present disclosure provides a methodfor operating a network data processing system on an aircraft. Themethod comprises performing a number of operations in a virtual machineon an aircraft. The virtual machine runs on a processor unit in thenetwork data processing system on the aircraft to create a simulatedcomputer environment and accesses resources of the processor unit forperforming the number of operations using a host operating system on theprocessor unit. The method further comprises identifying, by the networkdata processing system, a current state of the aircraft, and managingthe running of the virtual machine based on the current state of theaircraft and a policy for managing the virtual machine for differentstates of the aircraft.

Another advantageous embodiment of the present disclosure provides anapparatus comprising a first software aircraft part on a network dataprocessing system on an aircraft. The first software aircraft part is ahost operating system. The apparatus further comprises a number ofsecond software aircraft parts on the network data processing system.The number of second software aircraft parts is configured to create avirtual machine. The apparatus further comprises a number of thirdsoftware aircraft parts on the network data processing system. Thenumber of third software aircraft parts is configured to perform anumber of operations. The apparatus further comprises a processor uniton the network data processing system. The processor unit is configuredto perform the number of operations in the virtual machine. The virtualmachine is configured to run on the processor unit to create a simulatedcomputer environment and to access resources of the processor unit forperforming the number of operations using the host operating system onthe processor unit. The apparatus further comprises a management moduleon the network data processing system. The management module isconfigured to manage the running of the virtual machine based on acurrent state of the aircraft and a policy for managing the virtualmachine for different states of the aircraft.

Another advantageous embodiment of the present disclosure providesanother method for operating a network data processing system on anaircraft. A first software aircraft part comprising a host operatingsystem for a processor unit is loaded into transient storage in thenetwork data processing system on the aircraft.

Software aircraft parts loaded into the transient storage are lost whenthe network data processing system is shut down. A second softwareaircraft part comprising a virtual machine template is loaded into thetransient storage. The second software aircraft part is configured toprovide virtual machine functions usable in a number of virtual machineshaving different configurations. A third software aircraft partcomprising a configuration for a virtual machine is loaded into thetransient storage. A number of fourth software aircraft parts configuredto perform a number of operations are loaded into the transient storage.The host operating system and the virtual machine are run on theprocessor unit in the network data processing system on the aircraftfrom the first, second, and third software aircraft parts in thetransient storage. The virtual machine comprises an instance of thevirtual machine template having a configuration defined by the thirdsoftware aircraft part. The number of operations are performed in thevirtual machine using the number of fourth software aircraft parts inthe transient storage. The virtual machine is configured to accessresources of the processor unit for performing the number of operationsusing the host operating system on the processor unit.

The features, functions, and advantages can be achieved independently invarious embodiments of the present disclosure or may be combined in yetother embodiments in which further details can be seen with reference tothe following description and drawings.

BRIEF DESCRIPTION OF THE DRAWINGS

The novel features believed characteristic of the advantageousembodiments are set forth in the appended claims. The advantageousembodiments, however, as well as a preferred mode of use, furtherobjectives, and advantages thereof, will best be understood by referenceto the following detailed description of an advantageous embodiment ofthe present disclosure when read in conjunction with the accompanyingdrawings, wherein:

FIG. 1 is an illustration of a block diagram of a software aircraft partmanagement environment for managing software parts on the ground and onan aircraft in accordance with an advantageous embodiment;

FIG. 2 is an illustration of a block diagram of an aircraft inaccordance with an advantageous embodiment;

FIG. 3 is an illustration of a block diagram of an aircraft network dataprocessing system in accordance with an advantageous embodiment;

FIG. 4 is an illustration of a block diagram of aircraft states inaccordance with an advantageous embodiment;

FIG. 5 is an illustration of a block diagram of virtual machinemanagement policies in accordance with an advantageous embodiment;

FIG. 6 is an illustration of a block diagram of loadable softwareaircraft parts in an aircraft network data processing system inaccordance with an advantageous embodiment;

FIG. 7 is an illustration of a block diagram of software aircraft partdependencies in accordance with an advantageous embodiment;

FIG. 8 is an illustration of a flowchart of a process for loadingsoftware aircraft parts into transient storage in an aircraft networkdata processing system in accordance with an advantageous embodiment;

FIG. 9 is an illustration of a flowchart of a process for managing therunning of a virtual machine on an aircraft in accordance with anadvantageous embodiment; and

FIG. 10 is an illustration of a data processing system in accordancewith an advantageous embodiment.

DETAILED DESCRIPTION

The different advantageous embodiments recognize and take into account anumber of different considerations. “A number”, as used herein withreference to items, means one or more items. For example, “a number ofdifferent considerations” are one or more different considerations.

The different advantageous embodiments recognize and take into accountthat an aircraft network data processing system may need to supportsoftware applications of various types from various sources. Some ofthese applications may be neither written nor certified by the aircraftmanufacturer. Often, such applications may make use of commercialoff-the-shelf software that was not written with aircraft use in mind.The different advantageous embodiments recognize and take into accountthat a way is needed to separate these applications from otherapplications running on the aircraft network data processing system sothat there is no risk that these applications could interfere with theoperation of certified applications on the aircraft.

The different advantageous embodiments recognize and take into accountthat current methods for separating operations in a network dataprocessing system on an aircraft include running certain third partyapplications on separate computers. The different advantageousembodiments recognize and take into account that other methods forseparating applications have relied upon applying specific and oftenonerous constraints in the form of applications that may be hosted onthe aircraft network data processing system. For example, when softwareapplications that may not be fully certified are to be hosted on aline-replaceable unit on an aircraft along with certified functions, thedevelopers of such applications are forced to conform to veryrestrictive application programming interfaces and other technologicalconstraints. Line-replaceable unit operating system permissions andscheduling then may be relied upon to contain the applications.

The different advantageous embodiments also recognize and take intoaccount that any solution that overcomes the limitations of currentsystems and methods for separating operations on aircraft network dataprocessing systems and controlling such operations based on aircraftstates must adhere to accepted methodologies for loading data onto anaircraft. The different advantageous embodiments recognize and take intoaccount that accepted methodologies require that software and other datais loaded onto the aircraft network data processing system as discretesoftware aircraft parts. The configuration of the aircraft may then bereported in terms of the software aircraft parts that are installed onthe aircraft.

The different advantageous embodiments also recognize and take intoaccount that virtualization of traditional computer operating systemshas been used in fixed ground-based information technology systems.However, conventional virtualization has not been applied on aircraft,because conventional information technology approaches used inground-based systems do not fit well with the packaging and managementrequirements for software used on an aircraft.

Thus, one or more of the advantageous embodiments provide a system andmethod for loading and operating virtual machines in a network dataprocessing system on an aircraft. Virtual machines may be implemented onthe aircraft using a number of software aircraft parts. Therefore,conventional methodologies for loading software onto an aircraft andmaintaining an accurate record of the aircraft configuration may beemployed. The use of virtual machines on the aircraft provides for theseparation of operations in the aircraft network data processing systemwithout the use of additional hardware or stringent limitations onsoftware implementation. The running of the virtual machines on theaircraft may be managed based on the current state of the aircraft. Inthis manner, policies restricting operations that may be performed onthe aircraft network data processing system with respect to certainaircraft states may be effectively and efficiently implemented.

Turning to FIG. 1, a block diagram of a software aircraft partmanagement environment for managing software parts on the ground and onan aircraft is depicted in accordance with an advantageous embodiment.In this example, software aircraft part management environment 100 mayinclude number of software suppliers 102. Number of software suppliers102 provides software applications or other software for use on aircraft104. Number of software suppliers 102 may include any entity thatdevelops or otherwise supplies software for use on aircraft 104. Forexample, without limitation, number of software suppliers 102 mayinclude aircraft manufacturer 106, aircraft operator 108, and thirdparty software supplier 110. Aircraft manufacturer 106 manufacturesaircraft 104 and provides manufacturer software 112. Aircraft operator108 operates aircraft 104 and provides aircraft operator software 114.Aircraft operator 108 may be, without limitation, an airline, militaryorganization, or any other private or government organization thatoperates aircraft 104. Third party software supplier 110 provides thirdparty software 116.

Manufacturer software 112 and aircraft operator software 114 typicallymay be designed specifically for use on aircraft 104. Therefore,manufacturer software 112 and aircraft operator software 114 istypically certified for use on aircraft 104. Third party softwaresupplier 110 may provide third party software 116 specifically designedfor use on aircraft 104. Alternatively, third party software 116 mayinclude commercial off-the-shelf software. Third party software 116 mayor may not be certified for use on aircraft 104.

Manufacturer software 112, aircraft operator software 114, and thirdparty software 116 together form aircraft software 118 for use onaircraft 104. Aircraft maintenance entity 120 in software aircraft partmanagement environment 100 loads aircraft software 118 on aircraft 104.Aircraft maintenance entity 120 may be any entity that is responsiblefor loading aircraft software 118 on aircraft 104. For example, aircraftmaintenance entity 120 may include aircraft manufacturer 106 or aircraftoperator 108. Aircraft maintenance entity 120 may or may not be theowner of aircraft 104. Aircraft maintenance entity 120 may include anentity acting on behalf of the owner of aircraft 104 to load aircraftsoftware 118 on aircraft 104. In any case, it is assumed that aircraftmaintenance entity 120 has authority to load aircraft software 118 onaircraft 104.

Aircraft 104 may be a commercial or private passenger or cargo aircraftor a military or other government aircraft. Aircraft 104 may includeaircraft network data processing system hardware 122. Aircraft software118 may be loaded onto aircraft 104 in the form of software aircraftparts 124. Aircraft network data processing system hardware 122 andsoftware aircraft parts 124 together define aircraft configuration 126.Software aircraft parts 124 may be loaded onto aircraft 104 by aircraftmaintenance entity 120. Aircraft maintenance entity 120 may followspecified procedures for loading of software aircraft parts 124 onaircraft 104 so that aircraft configuration 126, including all softwareaircraft parts 124 currently installed on aircraft 104, is known.

Software aircraft parts 124 may be run on aircraft network dataprocessing system hardware 122 to perform various operations. Theseoperations may affect the performance or safety of aircraft 104.Operations performed using software aircraft parts 124 that are notspecifically designed for aircraft 104 or that are not certified for useon aircraft 104 in particular may affect other operations on aircraft104 in an unwanted manner.

Therefore, separating the performance of some operations on aircraft 104from the performance of other operations on aircraft 104 may bedesirable. Separating the operations may reduce the potential forunwanted effects during operation of aircraft 104. Furthermore,restricting the performance of some operations on aircraft 104 duringcertain states of operation of aircraft 104 also may be desirable. Forexample, it may be desirable to restrict the performance of someoperations on aircraft 104 when aircraft 104 is in a state where anyunwanted effects of such operations are most likely to occur or mostlikely to be significant.

Turning to FIG. 2, a block diagram of an aircraft is depicted inaccordance with an advantageous embodiment. In this example, aircraft200 is an example of one implementation of aircraft 104 in FIG. 1.Aircraft 200 is an example of vehicle 202 in which advantageousembodiments may be implemented. Vehicle 202 may be another type ofaerospace vehicle, such as a spacecraft or any other vehicle that iscapable of traveling through the air, in space, or both. Vehicle 202 mayalso be a ground vehicle or a water vehicle, such as a train, a surfaceship, or a submarine. Vehicle 202 is an example of one type of mobileplatform 204 in which advantageous embodiments may be implemented.

Aircraft 200 may comprise sensor systems 206. Sensor systems 206 mayinclude various systems on aircraft 200 for identifying aircraft state208. For example, without limitation, aircraft state 208 may includephase of flight 210, location 212, and other aircraft conditions 214.For example, without limitation, sensor systems 206 for identifyingphase of flight 210 may comprise a pitot tube; a temperature sensor; analtimeter; landing gear sensors that indicate whether landing gear areextended or retracted and whether landing gear are in contact with theground; sensors to identify the positions of various aircraft controlsurfaces, such as flaps, ailerons, and the like; and other sensorsystems. For example, without limitation, sensor systems 206 foridentifying location 212 may include a global positioning systemreceiver, an inertial navigation unit, or other systems for determininglocation 212. Sensor systems 206 may include other appropriate systemsfor identifying other aircraft conditions 214.

Aircraft 200 includes aircraft network data processing system 216.Aircraft network data processing system 216 also may be referred to asan on-board network system. Aircraft network data processing system 216includes aircraft network data processing system hardware 218 andsoftware aircraft parts 220. Software aircraft parts 220 may be loadedonto aircraft network data processing system hardware 218 and may be runon aircraft network data processing system hardware 218 to performvarious operations.

Aircraft network data processing system hardware 218 may comprisevarious hardware devices or systems that are connected together in anyappropriate network architecture to form aircraft network dataprocessing system 216. Aircraft network data processing system hardware218 may include line-replaceable units 222. For example, withoutlimitation, aircraft network data processing system hardware 218,including line-replaceable units 222, may include data processingsystems, routers, or other devices or systems with processors that runsoftware in the form of software aircraft parts 220. In particular,aircraft network data processing system hardware 218, includingline-replaceable units 222, may include processor units 224 for runningsoftware aircraft parts 220 to perform various operations.

Software aircraft parts 220 may be developed or otherwise provided bynumber of software suppliers 226. Software aircraft parts 220 fromnumber of software suppliers 226 may be loaded into aircraft networkdata processing system 216 by aircraft maintenance entity 228. In thisexample, number of software suppliers 226 is an example of number ofsoftware suppliers 102 in FIG. 1, and aircraft maintenance entity 228 isan example of aircraft maintenance entity 120 in FIG. 1.

Software aircraft parts 220 may include host operating system 230,software aircraft parts to create virtual machine 232, and softwareaircraft parts to perform operations for various applications 234. Hostoperating system 230 may be referred to as a first software aircraftpart. Software aircraft parts to create virtual machine 232 may bereferred to as second software aircraft parts. Software aircraft partsfor applications 234 may be referred to as third software aircraftparts.

Host operating system 230 may be an operating system for one ofprocessor units 224. Virtual machine 232 runs on one of processor units224 to create a simulated computer environment. Operations forapplications 234 are performed on virtual machine 232. Virtual machine232 accesses resources of one of processor units 224 on which it isrunning to perform the operations for applications 234. Virtual machine232 accesses resources of one of processor units 224 on which it isrunning using host operating system 230.

Virtual machine 232 is a software implementation of a machine thatexecutes programs, such as a physical machine. Therefore, applications234 may be run on virtual machine 232 as if they were running directlyon physical hardware. However, virtual machine 232 provides an isolatedoperating system installation within host operating system 230. Accessto resources of one of processor units 224 on which applications 234 arerunning may be managed at a more restrictive level for virtual machine232. Therefore, operations performed in virtual machine 232 may beseparated from other operations performed on one of processor units 224.Separating the operations may prevent the operations performed invirtual machine 232 from affecting other operations in unwanted ways.

Aircraft configuration 236 includes aircraft network data processingsystem hardware 218 and software aircraft parts 220 that are on aircraft200. Aircraft configuration 236 may be recorded and reported inconfiguration report 238. For example, configuration report 238 mayidentify line-replaceable units 222 and software aircraft parts 220 onaircraft 200 that form aircraft configuration 236.

In accordance with an illustrative example, virtual machine 232 may beused to run software aircraft parts 220 in the same manner as aline-replaceable hardware unit. Therefore, virtual machine 232 may beidentified as a line-replaceable unit in configuration report 238 foraircraft 200.

Management module 242 may manage the running of virtual machine 232based on a current aircraft state 208 and virtual machine managementpolicies 244. Virtual machine management policies 244 may indicate howor if virtual machine 232 is to be run for different aircraft states.For example, virtual machine management policies 244 may indicate thatvirtual machine 232 should be running for a particular aircraft state208 or that virtual machine 232 should not be running for a particularaircraft state 208. If virtual machine 232 should be running for aparticular aircraft state 208, virtual machine management policies 244may indicate parameters of operation of virtual machine 232 for thataircraft state 208. For example, virtual machine management policies 244may indicate the resources of aircraft network data processing system216 that virtual machine 232 may access for a particular aircraft state208.

Management module 242 may be implemented in aircraft network dataprocessing system 216. Management module 242 may be implemented inhardware, in software, or in a combination of hardware and software.Virtual machine management policies 244 may be stored in a database orany appropriate data structure. Alternatively or additionally, virtualmachine management policies 244 may be implemented as softwarealgorithms, hardware structures, or both software algorithms andhardware structures configured to implement virtual machine managementpolicies 244. Virtual machine management policies 244 may be implementedas part of management module 242 or separate from, but accessible by,management module 242. Management module 242 and virtual machinemanagement policies 244 may be implemented as a number of softwareaircraft parts 220.

The illustration of FIG. 2 is not meant to imply physical orarchitectural limitations to the manner in which different advantageousembodiments may be implemented. Other components in addition to and/orin place of the ones illustrated may be used. Some components may beunnecessary in some advantageous embodiments. Also, the blocks arepresented to illustrate some functional components. One or more of theseblocks may be combined and/or divided into different blocks whenimplemented in different advantageous embodiments.

For example, individual software parts may include software forperforming various functions. Multiple individual software parts may beused in combination to perform higher level functions. For example, oneor more of host operating system 230, virtual machine 232, andapplications 234 may comprise multiple software aircraft parts 220. Onthe other hand, software for performing multiple higher-level functionsmay be included in the same software part. For example, a single one ofsoftware aircraft parts 220 may be configured to perform functions forvarious combinations of host operating system 230, virtual machine 232,and applications 234.

Aircraft network data processing system 216 may comprise multiplephysical processor units 224 networked together. In accordance with anadvantageous embodiment, multiple virtual machines may be implemented onthe multiple networked processor units to perform various operations. Inthis case, the virtual machines across multiple processor units 224 maybe formed in a number of virtual networks that are overlaid on thephysical network. The virtual machines and virtual networks may beseparated from the physical processor units 224 and the aircraft networkdata processing system hardware 218 forming the physical network. Inthis embodiment, virtual machines may be migrated from one physicalprocessor unit to another as desired.

Turning to FIG. 3, a block diagram of an aircraft network dataprocessing system is depicted in accordance with an advantageousembodiment. In this example, aircraft network data processing system 301is an example of one implementation of aircraft network data processingsystem 216 in FIG. 2. Aircraft network data processing system 301comprises physical network 303. Physical network 303 may be implementedusing a combination of networking hardware and software. Multipleprocessor units may be networked together in physical network 303. Inthis example, physical network 303 comprises processor unit 300 and anumber of other processor units 305. Processor unit 300 is an example ofone implementation of processor units 224 in FIG. 2.

Processor unit 300 provides various resources 302. Resources 302 mayinclude resources that are provided by processor unit 300 itself or thatare provided by processor unit 300 via a connection of processor unit300 to resources 302. For example, without limitation, resources 302 mayinclude physical system resources, such as network access, a display orother output device, a keyboard or other input device, and disk storageor another form of storage device or memory.

Virtual machine 304 runs on processor unit 300 to create a simulatedcomputer environment. A number of operations 306 are performed invirtual machine 304. Virtual machine 304 accesses resources 302 forperforming number of operations 306. Virtual machine 304 accessesresources 302 using host operating system 308 on processor unit 300.

Other operations 310 may be performed in processor unit 300 at the sametime as operations 306. Other operations 310 are not performed invirtual machine 304. However, other operations 310 also may accessresources 302 using host operating system 308. In one advantageousembodiment, other operations 310 may include other virtual machinesrunning on processor unit 300. Virtual machine 304 provides separationbetween operations 306 and other operations 310 so that operations 306do not affect other operations 310 in an unacceptable way, even thoughoperations 306 and other operations 310 may be performed on the sameprocessor unit 300 at the same time.

Virtual machine 304 may be stopped without also stopping host operatingsystem 308. For purposes of the present application, including theclaims, stopping a virtual machine or other operating system may includeany action or series of actions that causes any operations that arebeing performed in the virtual machine to stop being performed in thevirtual machine either temporarily or permanently. For example, withoutlimitation, stopping virtual machine 304 may include pausing performanceof operations 306 in virtual machine 304 without removing virtualmachine 304 from processor unit 300.

Alternatively, stopping virtual machine 304 may include removing virtualmachine 304 from processor unit 300 or any other action whereby theperformance of operations 306 in virtual machine 304 is temporarily orpermanently stopped. As another example, stopping virtual machine 304may comprise suspending operation of virtual machine 304. In this case,for purposes of the present application, including the claims, startingvirtual machine 304 may comprise resuming operation of virtual machine304.

When virtual machine 304 is stopped without also stopping host operatingsystem 308, performance of operations 306 will stop while performance ofother operations 310, including running other virtual machines, maycontinue. Thus, performing operations 306 in virtual machine 304provides a convenient way to selectively stop performance of someoperations 306 without also stopping performance of other operations 310on the same processor unit 300 in an aircraft network data processingsystem.

For example, it may be desirable to stop performance of operations 306if a particular current state of the aircraft is identified. Performanceof operations 306 may be restarted in response to a subsequent furtherchange in the state of the aircraft. In this case, operations 306 may berestarted by restarting virtual machine 304. Performing operations 306in virtual machine 304 provides a way to restart operations 306 morequickly and efficiently in response to a change in the current state ofthe aircraft than would be possible if restarting operations 306required restarting a computer or other hardware platform on whichoperations 306 were implemented.

Use of virtual machines in an aircraft network data processing system isnot limited to a single processor unit. Other virtual machines 312 maybe running on other processor units 305 in physical network 303 toperform various operations. In accordance with an advantageousembodiment, virtual machine 304 may be connected to other virtualmachines 312 via a number of virtual networks 314. In this case, virtualnetworks 314 are overlaid on physical network 303. Virtual networks 314are separated from physical network 303 in the way that virtual machine304 and other virtual machines 312 are separated from the underlyingphysical processor unit 300 and other processor units 305, respectively.In this embodiment, virtual machines may be migrated between physicalprocessor units as desired.

Turning to FIG. 4, a block diagram of aircraft states is depicted inaccordance with an advantageous embodiment. In this example, aircraftstates 400 is an example of states for aircraft state 208 in FIG. 2.

Aircraft states 400 may include various phases of flight 402 of anaircraft. For example, phases of flight 402 may include, withoutlimitation, at least one of taxi 403, takeoff 404, climb 405, cruise406, descent 407, landing 408, and at the gate 409. Aircraft states 400may include location 410 of the aircraft. Location 410 may include thegeographic location of the aircraft. Location 410 also may include otherparameters related to the location of the aircraft in space, such as thealtitude or orientation of the aircraft in space.

Aircraft states 400 also may include, without limitation, engineconditions 412, outside conditions 414, cabin conditions 416, networkconditions 418, and conditions of other aircraft systems 420. Forexample, without limitation, engine conditions 412 may comprise at leastone of engine temperature, engine pressure, and other engine parametersat one or more locations within an engine of the aircraft. For example,without limitation, outside conditions 414 may comprise at least one oftemperature, pressure, and other conditions outside of the aircraft.

Cabin conditions 416 may comprise, for example, without limitation, atleast one of temperature, pressure, and other conditions within theaircraft passenger or crew cabin, or both. For example, withoutlimitation, network conditions 418 may include conditions on theaircraft network data processing system, such as the volume of datatraffic on the network, the presence or absence of various alerts, orother parameters indicating conditions in the aircraft network dataprocessing system, such as whether the aircraft is in a data load ormaintenance mode.

Turning to FIG. 5, a block diagram of virtual machine managementpolicies is depicted in accordance with an advantageous embodiment. Inthis example, virtual machine management policies 500 is an example ofone implementation of virtual machine management policies 244 in FIG. 2.Virtual machine management policies 500 define policies for managing therunning of a number of virtual machines on a network data processingsystem on an aircraft with respect to states of the aircraft. Forexample, virtual machine management policies 500 may define whether ornot particular virtual machines on an aircraft network data processingsystem should be running for a particular aircraft state. If aparticular virtual machine should be running for a particular aircraftstate, virtual machine management policies 500 may define the parametersof operation of the virtual machine for that aircraft state. Virtualmachine management policies 500 may be defined with respect to a currentaircraft state or with respect to changes in a current aircraft state,or both.

For example, without limitation, virtual machine management policies 500may include policies for running a virtual machine 502 or not running avirtual machine 504 for identified current aircraft states. Virtualmachine management policies 500 may include policies for stopping avirtual machine 506 and starting a virtual machine 508 in response toidentified changes in the current aircraft state.

Virtual machine management policies 500 may include policies definingoperating parameters of a virtual machine 510 for a given currentaircraft state. For example, without limitation, policies definingoperating parameters of a virtual machine 510 may include policiesdefining allowed access by a virtual machine to resources in theaircraft network data processing system for a given current aircraftstate.

Virtual machine management polices 500 may include policies definingconfiguration of a virtual network 512 for a given current aircraftstate. Virtual machine management policies 500 also or alternatively mayinclude other policies 514 for managing the running of virtual machinesin the aircraft network data processing system based on the currentstate of the aircraft or a change in the current state of the aircraft,or both.

For example, without limitation, certain software aircraft parts on anetwork data processing system on an aircraft may perform operationsthat provide interfaces to the aircraft network data processing systemfor wireless devices used by passengers in the passenger cabin of acommercial aircraft. These operations may not be considered operationsthat are critical to the safe and effective operation of the aircraft.The software aircraft parts for implementing these operations mayinclude commercial off-the-shelf software or otherwise may includesoftware that may not be fully certified for use in an aircraft.

In accordance with an advantageous embodiment, these operations may beperformed in a virtual machine on the aircraft network data processingsystem. Performing these operations on a virtual machine separates theseoperations from other operations on the aircraft network data processingsystem so that the operations supporting wireless device use by aircraftpassengers do not affect other potentially more-critical operations inunwanted ways.

It may be desired that wireless device use by aircraft passengers is notsupported during certain aircraft states. For example, during certainaircraft phases of flight, wireless device use by aircraft passengersmay be more likely to interfere with aircraft operation. In this case,virtual machine management policies 500 may be established for running avirtual machine 502 performing the operations supporting wireless use bythe passengers only during some phases of flight and for otherwise notrunning a virtual machine 504 during other phases of flight.

For example, without limitation, virtual machine management policies 500may indicate a policy for running a virtual machine 502 if the currentstate of the aircraft indicates a phase of flight of cruise or at thegate. If the current aircraft state indicates either of these phases offlight and the virtual machine is not already running, the virtualmachine may be started automatically.

Virtual machine management policies 500 may indicate a policy for notrunning a virtual machine 504 if the current state of the aircraftindicates a phase of flight of taxi, takeoff, climb, descent, orlanding. If the current aircraft state indicates any one of these phasesof flight and the virtual machine is running, the virtual machine may bestopped automatically.

Turning to FIG. 6, a block diagram of loadable software aircraft partsin an aircraft network data processing system is depicted in accordancewith an advantageous embodiment. Initially, loadable software aircraftparts for an aircraft may be installed in persistent storage 600 on theaircraft. For example, without limitation, persistent storage 600 may bea disk or other persistent storage device or devices on the aircraftnetwork data processing system. Loadable software aircraft parts may beinstalled in persistent storage 600 by an authorized aircraftmaintenance entity using approved procedures for installing softwareaircraft parts on aircraft to maintain the integrity of the aircraftconfiguration.

For example, without limitation, loadable software aircraft parts loadedin persistent storage 600 may include host operating system loadablesoftware aircraft part 602, system loadable software aircraft parts 604,and application loadable software aircraft parts 606. Log/system storage608 and application storage 610 also may be provided in persistentstorage 600 on the aircraft network data processing system.

To perform operations, loadable software aircraft parts are loaded frompersistent storage 600 into transient storage 612. Transient storage 612also may be referred to as memory, temporary storage, or temporarymemory. For example, without limitation, transient storage 612 mayinclude memory or other transient storage associated with a processorunit on the aircraft network data processing system.

Transient storage 612 may also include memory that has been temporarilyswapped out to a swap partition on persistent storage 600. Memory thatis swapped out in this manner may be managed by the main host operatingsystem. Therefore, transient storage 612 need not be limited to the sizeof physical memory. Software aircraft parts loaded into transientstorage 612 are lost when the aircraft network data processing system isshut down.

Host operating system loadable software aircraft part 602 is loaded intransient storage 612 to provide host operating system 614 for theprocessor unit. Depending on the operating system used, host operatingsystem loadable software aircraft part 602 may include virtualizationsupport 616. Virtualization support 616 supports the creation andoperation of a virtual machine on the processor unit. If virtualizationsupport 616 is not provided with host operating system loadable softwareaircraft part 602, virtualization support 616 may be loaded in transientstorage 612 separately, such as from system loadable software aircraftparts 604. System loadable software aircraft parts 604 also may beloaded in root file system 618 in transient storage 612.

Virtual machine template 620 may be loaded in transient storage 612 fromsystem loadable software aircraft parts 604. Specifically, virtualmachine template 620 may be loaded in transient storage 612 from avirtual machine template software aircraft part that is one of systemloadable software aircraft parts 604. Virtual machine template 620 isconfigured to provide virtual machine functions usable in a number ofvirtual machines having different configurations. A virtual machine iscreated by creating an instance of virtual machine template 620 havingthe desired configuration.

Virtual machine configuration 621 may be loaded in transient storage 612as a configuration software aircraft part from system loadable softwareaircraft parts 604. Application loadable software aircraft parts 606 maybe loaded in transient storage 612 to provide virtual machineapplications 622 to perform a number of operations in a virtual machine.Although virtual machines are in transient storage 612, the virtualmachines may be given a limited ability to write to persistent storage600 if needed.

Turning to FIG. 7, a block diagram of software aircraft partdependencies is depicted in accordance with an advantageous embodiment.In this example, the software aircraft part dependencies shown in FIG. 7may be one example of the relationship between software aircraft parts220 in FIG. 2.

In this example, a first category of software aircraft parts includessoftware aircraft parts for a host level of aircraft network dataprocessing system 700. Software aircraft parts for aircraft network dataprocessing system 700 may include a number of software aircraft partsfor configuring host network 702 and a number of software aircraft partsfor host operating system 704. For example, host operating system 704may be the operating system for a processor unit in aircraft networkdata processing system 700 on which a virtual machine is to be run.

A second category of software aircraft parts includes software aircraftparts for virtual machine support 706. Software aircraft parts forvirtual machine support 706 may include a number of software aircraftparts for configuring virtual machine network 708, a number of softwareaircraft parts for virtualization support 710, and a number of softwareaircraft parts for virtual machine management 711.

Virtual machine network 708 is a network for virtual machines as seen bythe host system. Virtual machine network 708 provides network isolationof virtual machines and restricts the resources and services that avirtual machine may access. Virtual machine management 711 may includethe functionality provided by a management module using virtual machinemanagement policies as described above. Some or all of the functionalityprovided by the software aircraft parts for virtual machine support 706may be included in the host software aircraft parts for aircraft networkdata processing system 700.

A third category of software aircraft parts includes software aircraftparts for virtual machine operating systems and configurations 712. Inthis example, software aircraft parts for virtual machine operatingsystems include software aircraft parts for virtual machine template 714and virtual machine template 716. A virtual machine template defines abasic virtual machine image. A virtual machine template providesfunctionality that may be used in a number of virtual machines havingdifferent configurations. A virtual machine template includes mechanismsfor integrating applications for the virtual machine.

In this example, software aircraft parts for virtual machineconfigurations include software aircraft parts for configuration 718,configuration 720, and configuration 722. A virtual machineconfiguration defines virtual machine unique configuration items,including the network as seen by the virtual machine. The virtualmachine configuration may also include a list of applications that theconfiguration is going to want to load into the virtual machine.

In this example, configuration 718 is used with virtual machine template714 to create a first virtual machine. Configuration 720 is used withvirtual machine template 714 to create a second virtual machine.Configuration 722 is used with virtual machine template 716 to create athird virtual machine. A software aircraft part for a single virtualmachine template may be used to create a number of virtual machineshaving various same or different configurations. The configurationsthemselves may comprise software aircraft parts.

A fourth category of software aircraft parts includes software aircraftparts for virtual machine hosted applications 724. In this example,software aircraft parts for virtual machine hosted applications 724include software aircraft parts for application 726, application 728,and application 730. In this example, application 726 is run to performoperations on a virtual machine with configuration 718. Application 728is run to perform operations on a virtual machine with configuration720. Application 730 is run to perform operations on a virtual machinewith configuration 722. A number of different applications may be run toperform operations on a single virtual machine configuration.

Turning to FIG. 8, a flowchart of a process for loading softwareaircraft parts into transient storage in an aircraft network dataprocessing system is depicted in accordance with an advantageousembodiment. The process of FIG. 8 may be implemented in aircraft networkdata processing system 216 in FIG. 2.

The process begins with loading a host operating system (operation 801).The host operating system may include support for virtualization. If thehost operating system does not include support for virtualization,virtualization support is loaded (operation 802). If the host operatingsystem does include support for virtualization, operations 801 and 802are combined into a single operation. A host network configuration isthen loaded (operation 803), and a virtual machine network configurationfor the host is loaded (operation 804). Host applications are thenloaded (operation 805).

It may then be determined whether or not there are virtual machines toload (operation 806). For example, there may be a number of virtualmachines to load if any applications are to be run on virtual machinesin the aircraft network data processing system. Operation 806 mayinclude determining whether or not there are virtual machines to loadbased on a current state of the aircraft and virtual machine managementpolicies. For example, virtual machine management policies may definewhich, if any, virtual machines may be loaded for a given current stateof the aircraft. If it is determined at operation 806 that there are novirtual machines to load, the process terminates.

If it is determined at operation 806 that there are virtual machines toload, a virtual machine template is loaded (operation 807). Theconfiguration of the virtual machine required to run a particularvirtual machine application defines the virtual machine template toload. The virtual machine configuration is loaded (operation 808), andvirtual machine applications are loaded (operation 809). The processthen returns to operation 806 to determine whether there are any morevirtual machines to load. Operations 807, 808, and 809 may be repeatedto load virtual machines as long as it is determined at operation 806that there are virtual machines to load. Multiple operations 807, 808,and 809 may be performed concurrently to load a multiple number ofvirtual machines at the same time.

Turning to FIG. 9, a flowchart of a process for managing running of avirtual machine on an aircraft is depicted in accordance with anadvantageous embodiment. The process of FIG. 9 may be implemented, forexample, in management module 242 in FIG. 2 using virtual machinemanagement policies 244 in FIG. 2.

The process begins by identifying current aircraft state (operation900). For example, the aircraft state identified in operation 900 may bea phase of flight or other state of the aircraft. Operation 900 maycomprise identifying a change in the current aircraft state from onestate to another state. Next, it is determined whether or not a virtualmachine is running (operation 902). If it is determined at operation 902that a virtual machine is running, it is then determined whether or notthe virtual machine should be stopped based on the current aircraftstate or the change in the current aircraft state and a policy formanaging the virtual machine for different states of the aircraft(operation 904). If it is determined at operation 904 that the virtualmachine should be stopped, the virtual machine is stopped (operation906), and the process returns to operation 900 to identify the currentaircraft state or a change in the current aircraft state.

If it is determined at operation 904 that the virtual machine should notbe stopped, it may be determined whether or not to change the virtualmachine operating parameters (operation 908). For example, operation 908may include determining whether or not to change the virtual machineaccess to resources or to change some other operating parameter of thevirtual machine based on the current aircraft state or the change in thecurrent aircraft state and the policy for managing the virtual machinefor different aircraft states.

If it is determined at operation 908 that the virtual machine operatingparameters are to be changed, the virtual machine operating parametersare changed (operation 910), with the process returning to operation 900thereafter. If it is determined at operation 908 that the virtualmachine operating parameters are not to be changed, the process returnsto operation 900.

Returning to operation 902, if it is determined that the virtual machineis not running, it is determined whether the virtual machine should bestarted based on the current aircraft state or the change in the currentaircraft state and the policy for managing the virtual machine fordifferent aircraft states (operation 912). If it is determined atoperation 912 that the virtual machine should be started, the virtualmachine is started (operation 914), with the process returning tooperation 900 thereafter. Operation 914 may include starting the virtualmachine with the operating parameters of the virtual machine, such asthe access to system resources allowed the virtual machine, defined bythe current aircraft state and the policy for managing the virtualmachine for different aircraft states. If it is determined at operation912 that the virtual machine should not be started, the process returnsto operation 900.

The illustration of FIG. 9 is not meant to imply limitations to themanner in which different advantageous embodiments may be implemented.In particular, managing a virtual machine in accordance with anadvantageous embodiment may not be limited to starting the virtualmachine, stopping the virtual machine, and changing the operatingparameters of the virtual machine based on the current aircraft state ora change in the current aircraft state and the policy for managing thevirtual machine for different aircraft states.

For example, in one embodiment, it may be determined whether or not toload the virtual machine into transient storage to be run on a processorunit based on the current state of the aircraft and the policy formanaging the virtual machine for different aircraft states.

In another embodiment, a virtual machine may be moved from one physicalprocessor unit to another physical processor unit based on a change inthe current aircraft state and the policy for managing the virtualmachine. For example, the virtual machine may be moved from one physicalprocessor unit to another physical processor unit in response to achange in the aircraft state indicating a load imbalance on the aircraftnetwork data processing system.

The flowcharts and block diagrams in the different depicted embodimentsillustrate the architecture, functionality, and operation of somepossible implementations of apparatuses and methods in an advantageousembodiment. In this regard, each block in the flowcharts or blockdiagrams may represent a module, segment, function, and/or a portion ofan operation or step. For example, one or more of the blocks may beimplemented as program code, in hardware, or a combination of programcode and hardware. When implemented in hardware, the hardware may, forexample, take the form of integrated circuits that are manufactured orconfigured to perform one or more operations in the flowcharts or blockdiagrams.

In some alternative implementations of an advantageous embodiment, thefunction or functions noted in the blocks may occur out of the ordershown in the figures. For example, in some cases, two blocks shown insuccession may be executed substantially concurrently, or the blocks maysometimes be performed in the reverse order, depending upon thefunctionality involved. Also, other blocks may be added in addition tothe blocks illustrated in a flowchart or block diagram.

One or more of the advantageous embodiments provides a capability toload and manage the operation of virtual machines in a network dataprocessing system on an aircraft. In accordance with an advantageousembodiment, virtual machines are implemented on an aircraft usingvarious software aircraft parts. The aircraft configuration, therefore,may be maintained in the conventional manner using part number control.Therefore, the advantages provided by the operation of virtual machinesin the aircraft may be obtained without changing aircraft maintenanceprocesses and required methodologies for loading software on anaircraft.

One or more of the advantageous embodiments provides a capability toconsolidate hardware in a network data processing system on an aircraft.Separation of operations in the aircraft network data processing systemmay be provided by the virtual machines rather than by the use ofseparate computer hardware. Advantageous embodiments also provide forhardware consolidation of aircraft maintenance systems.

One or more of the advantageous embodiments also provides a capabilityto allow aircraft manufacturers and aircraft operators greaterflexibility in using software from various sources for operational andmaintenance purposes. Developers of applications that are hosted invirtual machines on an aircraft do not need to conform to any specialconventions with respect to the operating system services that they usein order to provide for separation of operations in the aircraft networkdata processing system. Therefore, software application developers havemaximum flexibility in implementing desired functions. The underlyingvirtual machine structure will separate such functions from otheroperations in the aircraft network data processing system. In thismanner, critical operations in the aircraft network data processingsystem are protected from any inconsistencies in the operation ofnon-critical software applications that may not be fully certified.

One or more of the advantageous embodiments also provides a capabilityto operate virtual machines in a network data processing system on anaircraft in a manner that is power-loss safe. At a reboot after a powershutoff, the aircraft network data processing system will come upcleanly. The system need not perform any recovery operations in additionto those that would normally be needed in the absence of virtualmachines.

Turning now to FIG. 10, an illustration of a data processing system isdepicted in accordance with an advantageous embodiment. In this example,data processing system 1000 is an example of a data processing system inaircraft network data processing system 216 in FIG. 2. For example, dataprocessing system 1000 is an example of one implementation ofline-replaceable units 222 in FIG. 2. In this illustrative example, dataprocessing system 1000 includes communications fabric 1002.Communications fabric 1002 provides communications between processorunit 1004, memory 1006, persistent storage 1008, communications unit1010, input/output (I/O) unit 1012, and display 1014. In this example,processor unit 1004 is one example of processor units 224 in FIG. 2 orof processor unit 300 in FIG. 3. Memory 1006, persistent storage 1008,communications unit 1010, input/output (I/O) unit 1012, and display 1014are examples of resources accessible by processor unit 1004 viacommunications fabric 1002.

Processor unit 1004 serves to execute instructions for software that maybe loaded into memory 1006. Processor unit 1004 may be a number ofprocessors, a multi-processor core, or some other type of processor,depending on the particular implementation. Further, processor unit 1004may be implemented using a number of heterogeneous processor systems inwhich a main processor is present with secondary processors on a singlechip. As another advantageous example, processor unit 1004 may be asymmetric multi-processor system containing multiple processors of thesame type.

Memory 1006 and persistent storage 1008 are examples of storage devices1016. A storage device is any piece of hardware that is capable ofstoring information, such as, for example, without limitation, data,program code in functional form, and/or other suitable informationeither on a temporary basis and/or a permanent basis. Storage devices1016 may also be referred to as computer readable storage devices inthese examples. Memory 1006, in these examples, may be, for example, arandom access memory or any other suitable volatile or non-volatilestorage device. Persistent storage 1008 may take various forms,depending on the particular implementation.

For example, persistent storage 1008 may contain one or more componentsor devices. For example, persistent storage 1008 may be a hard drive, aflash memory, a rewritable optical disk, a rewritable magnetic tape, orsome combination of the above. The media used by persistent storage 1008also may be removable. For example, a removable hard drive may be usedfor persistent storage 1008.

Communications unit 1010, in these examples, provides for communicationswith other data processing systems or devices. In these examples,communications unit 1010 is a network interface card. Communicationsunit 1010 may provide communications through the use of either or bothphysical and wireless communications links.

Input/output unit 1012 allows for input and output of data with otherdevices that may be connected to data processing system 1000. Forexample, input/output unit 1012 may provide a connection for user inputthrough a keyboard, a mouse, and/or some other suitable input device.Further, input/output unit 1012 may send output to a printer. Display1014 provides a mechanism to display information to a user.

Instructions for the operating system, applications, and/or programs maybe located in storage devices 1016, which are in communication withprocessor unit 1004 through communications fabric 1002. In theseadvantageous examples, the instructions are in a functional form onpersistent storage 1008. These instructions may be loaded into memory1006 for execution by processor unit 1004. The processes of thedifferent embodiments may be performed by processor unit 1004 usingcomputer-implemented instructions, which may be located in a memory,such as memory 1006.

These instructions are referred to as program instructions, programcode, computer usable program code, or computer readable program codethat may be read and executed by a processor in processor unit 1004. Theprogram code in the different embodiments may be embodied on differentphysical or computer readable storage media, such as memory 1006 orpersistent storage 1008.

Program code 1018 is located in a functional form on computer readablemedia 1020 that is selectively removable and may be loaded onto ortransferred to data processing system 1000 for execution by processorunit 1004. Program code 1018 and computer readable media 1020 formcomputer program product 1022 in these examples. In one example,computer readable media 1020 may be computer readable storage media 1024or computer readable signal media 1026.

Computer readable storage media 1024 may include, for example, anoptical or magnetic disk that is inserted or placed into a drive orother device that is part of persistent storage 1008 for transfer onto astorage device, such as a hard drive, that is part of persistent storage1008. Computer readable storage media 1024 also may take the form of apersistent storage, such as a hard drive, a thumb drive, or a flashmemory, that is connected to data processing system 1000. In someinstances, computer readable storage media 1024 may not be removablefrom data processing system 1000.

In these examples, computer readable storage media 1024 is a physical ortangible storage device used to store program code 1018 rather than amedium that propagates or transmits program code 1018. Computer readablestorage media 1024 is also referred to as a computer readable tangiblestorage device or a computer readable physical storage device. In otherwords, computer readable storage media 1024 is a media that can betouched by a person.

Alternatively, program code 1018 may be transferred to data processingsystem 1000 using computer readable signal media 1026. Computer readablesignal media 1026 may be, for example, a propagated data signalcontaining program code 1018. For example, computer readable signalmedia 1026 may be an electromagnetic signal, an optical signal, and/orany other suitable type of signal. These signals may be transmitted overcommunications links, such as wireless communications links, opticalfiber cable, coaxial cable, a wire, and/or any other suitable type ofcommunications link. In other words, the communications link and/or theconnection may be physical or wireless in the illustrative examples.

In some advantageous embodiments, program code 1018 may be downloadedover a network to persistent storage 1008 from another device or dataprocessing system through computer readable signal media 1026 for usewithin data processing system 1000. For instance, program code stored ina computer readable storage medium in a server data processing systemmay be downloaded over a network from the server to data processingsystem 1000. The data processing system providing program code 1018 maybe a server computer, a client computer, or some other device capable ofstoring and transmitting program code 1018.

The different components illustrated for data processing system 1000 arenot meant to provide architectural limitations to the manner in whichdifferent embodiments may be implemented. The different advantageousembodiments may be implemented in a data processing system includingcomponents in addition to or in place of those illustrated for dataprocessing system 1000. Other components shown in FIG. 10 can be variedfrom the illustrative examples shown. The different embodiments may beimplemented using any hardware device or system capable of runningprogram code. As one example, data processing system 1000 may includeorganic components integrated with inorganic components and/or may becomprised entirely of organic components excluding a human being. Forexample, a storage device may be comprised of an organic semiconductor.

In another advantageous example, processor unit 1004 may take the formof a hardware unit that has circuits that are manufactured or configuredfor a particular use. This type of hardware may perform operationswithout needing program code to be loaded into a memory from a storagedevice to be configured to perform the operations.

For example, when processor unit 1004 takes the form of a hardware unit,processor unit 1004 may be a circuit system, an application specificintegrated circuit (ASIC), a programmable logic device, or some othersuitable type of hardware configured to perform a number of operations.With a programmable logic device, the device is configured to performthe number of operations. The device may be reconfigured at a later timeor may be permanently configured to perform the number of operations.Examples of programmable logic devices include, for example, aprogrammable logic array, a programmable array logic, a fieldprogrammable logic array, a field programmable gate array, and othersuitable hardware devices. With this type of implementation, programcode 1018 may be omitted, because the processes for the differentembodiments are implemented in a hardware unit.

In still another illustrative example, processor unit 1004 may beimplemented using a combination of processors found in computers andhardware units. Processor unit 1004 may have a number of hardware unitsand a number of processors that are configured to run program code 1018.With this depicted example, some of the processes may be implemented inthe number of hardware units, while other processes may be implementedin the number of processors.

In another example, a bus system may be used to implement communicationsfabric 1002 and may be comprised of one or more buses, such as a systembus or an input/output bus. Of course, the bus system may be implementedusing any suitable type of architecture that provides for a transfer ofdata between different components or devices attached to the bus system.

Additionally, communications unit 1010 may include a number of devicesthat transmit data, receive data, or transmit and receive data.Communications unit 1010 may be, for example, a modem or a networkadapter, two network adapters, or some combination thereof.

Further, a memory may be, for example, memory 1006, or a cache, such asfound in an interface and memory controller hub that may be present incommunications fabric 1002.

The description of the different advantageous embodiments has beenpresented for purposes of illustration and description and is notintended to be exhaustive or to limit the embodiments in the formdisclosed. Many modifications and variations will be apparent to thoseof ordinary skill in the art. Further, different advantageousembodiments may provide different advantages as compared to otheradvantageous embodiments. The embodiment or embodiments selected arechosen and described in order to best explain the principles of theembodiments, the practical application, and to enable others of ordinaryskill in the art to understand the disclosure for various embodimentswith various modifications as are suited to the particular usecontemplated.

1. A method for operating a network data processing system on anaircraft comprising: performing a number of operations in a virtualmachine on the aircraft, wherein the virtual machine runs on a processorunit in the network data processing system on the aircraft to create asimulated computer environment and wherein the virtual machine accessesresources of the processor unit for performing the number of operationsusing a host operating system on the processor unit; identifying, by thenetwork data processing system, a current state of the aircraft; andmanaging the running of the virtual machine based on the current stateof the aircraft and a policy for managing the virtual machine fordifferent states of the aircraft.
 2. The method of claim 1, whereinmanaging the running of the virtual machine comprises stopping thevirtual machine without stopping the host operating system responsive toidentifying the current state of the aircraft as a first state and basedon a policy for not running the virtual machine for the first state. 3.The method of claim 2, wherein managing the running of the virtualmachine comprises starting the virtual machine responsive to identifyingthe current state of the aircraft as a second state and based on apolicy for running the virtual machine for the second state.
 4. Themethod of claim 1, wherein: identifying the current state of theaircraft comprises identifying a change in the current state of theaircraft; and managing the running of the virtual machine comprisesmanaging the running of the virtual machine based on the change in thecurrent state of the aircraft and the policy for managing the virtualmachine for the different states of the aircraft.
 5. The method of claim4, wherein managing the running of the virtual machine compriseschanging operating parameters of the virtual machine.
 6. The method ofclaim 1, wherein identifying the current state of the aircraft comprisesidentifying at least one of a phase of flight of the aircraft, alocation of the aircraft, engine conditions, cabin conditions, outsideconditions, and conditions of the network data processing system.
 7. Themethod of claim 1, wherein: the host operating system is a firstsoftware aircraft part loaded into transient storage in the network dataprocessing system on the aircraft, wherein software aircraft partsloaded into the transient storage are lost when the network dataprocessing system is shut down; the virtual machine creates thesimulated computer environment using a number of second softwareaircraft parts loaded into the transient storage; and the number ofoperations are performed using a number of third software aircraft partsloaded into the transient storage.
 8. The method of claim 7, wherein:the number of second software aircraft parts comprise a virtual machinetemplate software aircraft part configured to provide virtual machinefunctions usable in a number of virtual machines having differentconfigurations and a configuration software aircraft part comprising aconfiguration for the virtual machine; and the virtual machine comprisesan instance of the virtual machine template software aircraft parthaving a configuration defined by the configuration software aircraftpart.
 9. The method of claim 1, wherein: the virtual machine and anumber of other virtual machines form a virtual network; and managingthe running of the virtual machine comprises changing a configuration ofthe virtual network.
 10. An apparatus comprising: a first softwareaircraft part on a network data processing system on an aircraft,wherein the first software aircraft part is a host operating system; anumber of second software aircraft parts on the network data processingsystem, the number of second software aircraft parts configured tocreate a virtual machine; a number of third software aircraft parts onthe network data processing system, the number of third softwareaircraft parts configured to perform a number of operations; a processorunit on the network data processing system configured to perform thenumber of operations in the virtual machine, wherein the virtual machineis configured to run on the processor unit to create a simulatedcomputer environment and to access resources of the processor unit forperforming the number of operations using the host operating system onthe processor unit; and a management module on the network dataprocessing system configured to manage the running of the virtualmachine based on a current state of the aircraft and a policy formanaging the virtual machine for different states of the aircraft. 11.The apparatus of claim 10, wherein the management module is configuredto stop the virtual machine without stopping the host operating systemresponsive to identifying the current state of the aircraft as a firststate and based on a policy for not running the virtual machine for thefirst state.
 12. The apparatus of claim 10, wherein: the virtual machineand a number of other virtual machines form a virtual network; and themanagement module is configured to manage a configuration of the virtualnetwork based on the current state of the aircraft and a policy formanaging the virtual network for the different states of the aircraft.13. The apparatus of claim 10, wherein the management module isconfigured to change an operating parameter of the virtual machine basedon a change in the current state of the aircraft and the policy formanaging the virtual machine for the different states of the aircraft.14. The apparatus of claim 10, wherein the current state of the aircraftcomprises at least one of a phase of flight of the aircraft, a locationof the aircraft, engine conditions, cabin conditions, outsideconditions, and conditions of the network data processing system. 15.The apparatus of claim 10, wherein: the number of second softwareaircraft parts comprise a virtual machine template software aircraftpart configured to provide virtual machine functions usable in a numberof virtual machines having different configurations and a configurationsoftware aircraft part comprising a configuration for the virtualmachine; and the virtual machine comprises an instance of the virtualmachine template software aircraft part having a configuration definedby the configuration software aircraft part.
 16. The apparatus of claim10 further comprising: the network data processing system on theaircraft.
 17. A method for operating a network data processing system onan aircraft comprising: loading a first software aircraft partcomprising a host operating system for a processor unit into transientstorage in the network data processing system on the aircraft, whereinsoftware aircraft parts loaded into the transient storage are lost whenthe network data processing system is shut down; loading a secondsoftware aircraft part comprising a virtual machine template into thetransient storage, the second software aircraft part configured toprovide virtual machine functions usable in a number of virtual machineshaving different configurations; loading a third software aircraft partcomprising a configuration for a virtual machine into the transientstorage; loading a number of fourth software aircraft parts into thetransient storage, the number of fourth software aircraft partsconfigured to perform a number of operations; running the host operatingsystem and the virtual machine on the processor unit in the network dataprocessing system on the aircraft from the first, the second, and thethird software aircraft parts in the transient storage, the virtualmachine comprising an instance of the virtual machine template having aconfiguration defined by the third software aircraft part; andperforming the number of operations in the virtual machine using thenumber of fourth software aircraft parts in the transient storage,wherein the virtual machine is configured to access resources of theprocessor unit for performing the number of operations using the hostoperating system on the processor unit.
 18. The method of claim 17further comprising: identifying, by the network data processing system,a current state of the aircraft; and managing the running of the virtualmachine based on the current state of the aircraft and a policy formanaging the virtual machine for different states of the aircraft. 19.The method of claim 18, wherein managing the running of the virtualmachine comprises stopping the virtual machine without stopping the hostoperating system responsive to identifying the current state of theaircraft as a first state and based on a policy for not running thevirtual machine for the first state.
 20. The method of claim 18,wherein: the virtual machine and a number of other virtual machines forma virtual network; and managing the running of the virtual machinecomprises managing a configuration of the virtual network.